The Client
One of the world’s largest pharma companies
Highlights
-
Visualises regulatory exposure
-
Supports regulatory reporting needs
The Challenge
Context:
With increasing regulation around data privacy and protection, the organisation needed a mechanism for consolidating its disparate information on where personally identifiable information was held, accessed and viewed across the world to satisfy the regulators. The existing paper-based process was difficult to maintain and hard to navigate to find the required information, a situation that was not sustainable.
The Solution
Essential supported Adherence to Regulations:
Using Essential, the organisation consolidated existing information on applications and databases holding personally identifiable information alongside business processes, location information and data classifications, to provide a comprehensive overview of the company’s use of personal data. Through a set of Essential views, the Risk & Compliance team could quickly see what data was held where and who within the organization had access to that data. The data was kept updated through a distributed maintenance process, with local compliance teams being responsible for data updates.
The Outcome
Key Achievements:
- Essential played a key role in supporting the regulatory needs of the organization around data usage and access
- Essential acted as the central point of information for the Risk & Compliance Team enabling them to not only produce reports that were sent directly to regulatory bodies, but also demonstrate a comprehensive approach to meeting data privacy regulatory needs